Notes:
• This is an individual assignment!
• References should be “numbered” within the text (e.g. [1] – Reference 1) and selected from credible sources (e.g. Journals, Conferences, Conference Proceedings, White papers; no Wikipedia or random websites)
• Default margins, 12 point “Times New Roman” and 1.15 spacing
• Students are strictly advised to write their own report and avoid copying materials directly from online resources or one another. It is a common practice to read from multiple sources and write down a summary in your own words, with proper referencing.
Question 1: Many companies perform IP to geo-location analysis on their clients for various reasons such as marketing, interest or security. In 5 pages (no less, no more!) explain the techniques used to determine the true location of a host device on the Internet (this excludes mobile devices).
Question 2: Imagine you own a medium size company with 40 employees aged between 30 and 65 and a limited security budget. Your company provides online shopping services of electronics and computer accessories (only). In 4 pages (no less, no more) explain how you’d divide your budget between the following. Justify your answer.
• Training
• Creating and enforcing strict policies
• Controls
Question 3: Install SNORT Intrusion detection system on a virtual machine (I strongly recommend a Debian-based Linux distribution such as Ubuntu, Mint etc). Configure it and create a simple rule which generates an alert each time a specific website is visited from that virtual machine (e.g. www.yahoo.com).
Create a user with your student ID in the Linux and write a short report showing how you installed Snort, the created rules and the alerts generated. I may ask everyone to show the system running!
Additional points will be given to students who can simulate multiple types of attacks and install a graphical user interface for log analysis, examples of these tools are: BASE, OSSIM, SnorBy, SGUIL